Lucene search
+L

1 matches found

OSV
OSV
added 2024/11/16 7:16 a.m.42 views

BIT-POSTGRESQL-2024-10976 PostgreSQL row security below e.g. subqueries disregards user ID changes

Incomplete tracking in PostgreSQL of tables with row security allows a reused query to view or change different rows from those intended. CVE-2023-2455 and CVE-2016-2193 fixed most interaction between row security and user ID changes. They missed cases where a subquery, WITH query, security invok...

5.4CVSS6.8AI score0.00786EPSS
SaveExploits0References4
Rows per page
Query Builder